nss-pam-ldapd (0.9.12-2) unstable; urgency=medium

  * Properly escape square brackets in nslcd.conf changes (closes: #819961)
  * Only create socket directory from init script (LP: #1020303)
  * Retain empty values in nslcd.conf (closes: #1002047)

 -- Arthur de Jong <adejong@debian.org>  Sun, 02 Jan 2022 11:45:29 +0100

nss-pam-ldapd (0.9.12-1) unstable; urgency=medium

  [ Arthur de Jong ]
  * New upstream release:
    - allow explicitly configuring an empty search base (for LDAP servers
      that support that)
    - support LDAP attributes with minus characters in attribute mapping
      expressions
    - add tls_reqsan, tls_crlfile and tls_crlcheck options (thanks
      Sebastien Blavier)
    - support generating ldaps:// URIs from DNS SRV records for port 389 by
      using DNSLDAPS in the uri option
    - prefer the first URI listed in nslcd.conf after reconnecting after
      idle_timelimit
    - fix handling of pam_authc_ppolicy no
    - fix debug logging of ldap timeout values
    - documentation improvements (thanks Filip Dvorak and Benedict Reuschling)
    - add pam_authc_ppolicy support to pynslcd
    - fix Python 3 compatibility in chsh.ldap
    - fix for running pynslcd without the uid option
    - partial support for running tests with slapd 2.5 (thanks Ryan Tandy)
  * Switch to using /run/nslcd (fixes lintian warnings)
  * Update debian/upstream/metadata
  * Drop lintian override
  * Use debhelper-compat instead of debian/compat
  * Update debhelper compatibility level to 13
  * Specify Rules-Requires-Root: no
  * Update debian/watch version
  * Upgrade to standards-version 4.6.0 (no changes needed)
  * Include more output on test suite failure
  * Add lintian override for pam_ldap(8) manual page warning
  * Run tests with netbase installed for /etc/services and /etc/protocols

  [ Sergio Durigan Junior ]
  * Support networkd-dispatcher notifications
    - d/nslcd.if-up: Adjust script to make it compatible with
      networkd-dispatcher
    - d/nslcd.links: Install the proper nslcd script inside the
      /usr/lib/networkd-dispatcher/routable.d/ directory (LP: #1718227)

 -- Arthur de Jong <adejong@debian.org>  Sat, 20 Nov 2021 16:10:03 +0100

nss-pam-ldapd (0.9.11-1) unstable; urgency=medium

  * New upstream release:
    - add support for Python 3 in pynslcd and utilities
    - fix crash in chsh.ldap (thanks Mizunashi Mana)
    - test suite improvements
  * Drop patches
  * Mark the pynslcd tests as flaky because they are likely to fail
  * Switch to Python 3 (closes: #937165)
  * Update debian/copyright
  * Upgrade to standards-version 4.4.1 (no changes needed)

 -- Arthur de Jong <adejong@debian.org>  Sun, 06 Oct 2019 23:00:06 +0200

nss-pam-ldapd (0.9.10-2) unstable; urgency=medium

  [ Arthur de Jong ]
  * Fix crash in chsh.ldap (closes: 908319)
  * Make signing key minimal (thanks lintian)
  * Upgrade to standards-version 4.3.0 (no changes needed)
  * Remove code that handled upgrades from pre-0.9 versions of nss-pam-ldapd

  [ Sunil Mohan Adapa ]
  * Change ca-certificates as dependency instead of recommends since
    initial configuration uses certificates (closes: #877002).

 -- Arthur de Jong <adejong@debian.org>  Sun, 20 Jan 2019 17:08:01 +0100

nss-pam-ldapd (0.9.10-1) unstable; urgency=medium

  * New upstream release:
    - make password expiry messages correct and consistent (thanks Têko
      Mihinto)
    - add domain variable for use in pam_authz_search
    - allow logging longer lines
    - create nslcd socket after dropping privileges to avoid slow start-ups
  * Set Vcs-* to salsa.debian.org
  * Upgrade to standards-version 4.2.1 (no changes needed)

 -- Arthur de Jong <adejong@debian.org>  Sun, 02 Sep 2018 17:25:16 +0200

nss-pam-ldapd (0.9.9-1) unstable; urgency=medium

  * new upstream release:
    - support spaces in attribute mapping expressions
    - allow parsing longer lines in the configuration file
    - allow for longer host names (closes: #890508)
  * upgrade to debhelper compatibility level 7
  * upgrade to standards-version 4.1.3 (change package priority to optional)
  * do not run test suite if DEB_BUILD_OPTIONS contains nocheck

 -- Arthur de Jong <adejong@debian.org>  Mon, 19 Feb 2018 21:00:00 +0100

nss-pam-ldapd (0.9.8-1) unstable; urgency=medium

  * new upstream release:
    - add a pam_authc_search option that can be used to configure the search
      operation that is performed after authentication
    - add nss_uid_offset and nss_gid_offset options that can be used to
      change returned numeric user and group ids from LDAP (thanks Seth
      Wright)
    - do not retry failed user password on second LDAP server
    - the validnames option now also applies to shadow lookups
    - support ethernet addresses in LDAP in compact and long formats
    - improvements to getent.ldap command (a few minor bug fixes and
      preparations for Python 3 support)
    - log entries and lookups failing nss_min_uid at debug level
  * update links to use HTTPS
  * remove --no-create-home from adduser to hide a few warnings
    (closes: #858826)
  * remove pie from hardening blacklist because it is no longer needed for
    stretch (thanks Adrian Bunk) (closes: #859432)
  * update debian/copyright
  * upgrade to standards-version 4.0.0 (no changes needed)

 -- Arthur de Jong <adejong@debian.org>  Tue, 27 Jun 2017 22:00:00 +0200

nss-pam-ldapd (0.9.7-2) unstable; urgency=medium

  * recommend ca-certificate which is needed due to adding tls_cacertfile by
    default (see #750949) and the checking of tls_cacertfile in 0.9.7
    (closes: #836720)
  * fix parsing of nslcd.conf tls_cacert option in package configuration
    (closes: #851564)
  * add dependency on lsb-base for init script (thanks lintian)

 -- Arthur de Jong <adejong@debian.org>  Sun, 22 Jan 2017 16:00:00 +0100

nss-pam-ldapd (0.9.7-1) unstable; urgency=medium

  * new upstream release:
    - check existence of TLS certificate and key files on start-up
    - fix password policy expiration handling when password was about to
      expire (thanks Mathieu Baeumler for tracking this down)
      (closes: #794068)
    - fix updating of shadowLastChange attribute when chasing referrals
      (thanks Vasilis Tsiligiannis)
    - add an pam_authc_ppolicy option to allows completely disabling ppolicy
      handling (thanks Mathieu Baeumler)
    - fix handling of nss_disable_enumeration (thanks Andrew W Elble for
      pointing this out)
    - display human readable password expiry messages (thanks Mathieu
      Baeumler)
    - fix error when changing PAM user name (thanks 依云)
    - support substring expressions ${var:offset:length} in attribute mapping
      (thanks Giovanni Mascellani)
    - also honor the ignorecase option in PAM
  * drop fix-ppolicy-expiration-warnings.patch which is part of 0.9.7
  * put nsswitch.conf services in more natural order in debconf question
  * update debian/copyright

 -- Arthur de Jong <adejong@debian.org>  Sun, 14 Aug 2016 23:00:00 +0200

nss-pam-ldapd (0.9.6-4) unstable; urgency=medium

  * debconf translation updates:
    - Brazilian Portuguese by Adriano Rafael Gomes (closes: #799414)
  * have init script stop action only return when nslcd has actually stopped
    (closes: #814881)
  * update Vcs and homepage URLs to HTTPS (thanks lintian)
  * remove explicit ldconfig call from libnss-ldapd.postrm (thanks lintian)
  * upgrade to standards-version 3.9.8 (no changes needed)

 -- Arthur de Jong <adejong@debian.org>  Fri, 27 May 2016 11:30:00 +0200

# For older changelog entries, run 'apt-get changelog nslcd'
